Privacy Policy | Law Lab Africa

Last updated: 24 October 2026 · Law Lab Africa LLC

1. Who we are

Law Lab Africa LLC ("Law Lab Africa", "we", "us") is a technology law consultancy and research house. We are a limited liability company formed in Wyoming, United States, with our registered office at 30 N Gould St Ste N, Sheridan, WY 82801, United States, and we work across Africa. This policy covers this website, www.lawlab.africa, including our scholarship programme. Our learning platform at learn.lawlab.africa has its own Privacy Policy.

We decide how and why the personal data described here is used, so we are its data controller. The data protection law of the country where you live applies to how we treat your personal data. Section 11 names the law and the authority for each country where we offer a course.

For general questions, write to info@lawlab.africa. For anything about a scholarship application, write to course@lawlab.africa.

2. What we collect

Enquiries: your name, email address, organisation and message when you use our contact form or write to us.
Waitlists: your name, email address and organisation when you join a course waitlist, and whether you agreed to hear from us about courses.
Consultations: the details you give our scheduling service when you book a call.
The Data Protection Digest: your email address, if you subscribe here or on dataprotectiondigest.africa.
Scholarship applications: your name, email address and phone number; whether you are a student, a recent graduate or a founder; your university or organisation, programme and student society; your written answers; whether you asked to be considered for a full scholarship, your statement of need and whether you receive a loan, bursary or other scholarship; the time you can commit; how you heard about the scholarship and the link you came from; and whether you asked us to keep your application on file or to send you the Digest.
Scholarship offers: whether you accepted or declined, the email address you chose for your course account, and for a partial scholarship the payment amount, status and reference. Your M-Pesa or card payment is made on our payment provider's page, which handles your payment details. We do not see your PIN or card number.
Technical information: to stop automated submissions, the application form keeps a coded form of your IP address, which cannot be turned back into the address, and checks how quickly the form was completed. We also keep records of which emails we sent you and whether they were delivered.

We do not ask for sensitive personal data such as health, religion or ethnicity. Please do not include it in your answers.

3. What you must give us

To apply for a scholarship, you must give your name, email address, phone number and the answers the form marks as required. Without them we cannot consider your application or contact you about it. Everything else, such as the Digest box or keeping your application on file, is optional and does not affect our decision.

4. Why we use it, and on what legal basis

To answer enquiries and arrange consultations. Basis: steps you ask us to take before a contract, or our legitimate interest in replying to people who contact us.
To consider your scholarship application, tell you our decision, send your offer and reminders, and, if you accept or pay, give you your place on the course. We may call or message you on the phone number you gave if an email to you fails. Basis: steps you ask us to take before enrolling you.
To take scholarship contributions and handle refunds under our Scholarship Policy, and to keep the financial records the law requires. Basis: our contract with you, and our legal obligations.
To keep your application for a later intake, only if you ticked the box. Basis: your consent.
To learn which outreach reaches students, by counting applications by the link they came from. Basis: our legitimate interest in reaching applicants well. We use counts, not individuals.
To protect the forms from abuse. Basis: our legitimate interest in a working application process.
To send the Data Protection Digest or course news, only if you asked for it. Basis: your consent, which you can withdraw at any time.

5. Who receives it

We do not sell personal data, and we do not share it with advertisers.

Our service providers, who process it for us under contract and only on our instructions: website hosting, our database, email delivery, scheduling, and the software we use to manage applications. If you would like their names and the countries where they work, write to us and we will tell you.
Our payment provider, which processes scholarship contributions and decides for itself how to handle payment data under its own privacy policy and the law.
The Data Protection Digest's email provider, only if you ask for the Digest.
Organisations that tell their members about the scholarship. They see only how many applications came through their link, never who applied.
Authorities and advisers, where the law requires it, or where we need to establish, exercise or defend a legal claim.

6. Personal data that leaves your country

Our database is in Ireland, in the European Union. Some of our service providers work in the United States or use servers in several countries, so your personal data is transferred out of the country where you live. Before we use a provider outside your country, we assess the protection it gives personal data. We use providers that commit by contract to protect it, and providers bound by European Union data protection law where we can. We keep a record of each transfer.

7. How long we keep it

Unsuccessful scholarship applications: deleted 6 months after they end, or 12 months if you asked us to keep your application on file. An application ends when we send our decision, when you decline an offer, or when an offer closes without an answer.
Applications that led to a place: kept with your course enrolment, under the learning platform's Privacy Policy.
The form's coded IP addresses: deleted after 30 days.
Email delivery records: deleted after 12 months.
Payment records: our payment provider keeps them, and we keep the records the law requires for tax and accounting, for as long as that law requires.
Enquiries: generally kept for six years.

You can ask us to delete your application sooner at any time.

8. Your rights

Wherever you live, you have the right:

to be told how your personal data is used, as in this policy;
to see the personal data we hold about you, and receive a copy;
to have inaccurate, incomplete or misleading data corrected;
to have data deleted that we are no longer entitled to keep;
to object to our processing of your data, and to ask us to restrict it while a question about it is settled;
to receive your data in a structured, commonly used, machine-readable format; and
to withdraw your consent at any time, for anything we do on the basis of consent.

Your country's law may give you further rights, and section 11 sets out the deadlines it gives us. Write to course@lawlab.africa about a scholarship application, or info@lawlab.africa about anything else. We may ask you to confirm who you are first. If you are unhappy with how we have handled your data, you can complain to the data protection authority in your country (section 11).

9. Cookies

This website sets no tracking or advertising cookies. We count page visits with an analytics service that sets no cookies and does not identify you. See our Cookies Policy.

10. How we protect your data

We use encrypted connections, keep the application database closed to the public, limit access to the people at Law Lab Africa who need it, review applications on a private system that is not on the public internet, and limit repeated form submissions. If someone gets unauthorised access to your personal data and there is a real risk of harm to you, we will tell the data protection authority within the time the law sets and tell you as soon as we reasonably can.

11. Your country

Kenya. The Data Protection Act, 2019 and its regulations apply. We answer within seven days for a copy of your data, 14 days for a correction or deletion, and 30 days for a transfer of your data to another organisation. If a breach puts you at real risk of harm, we tell the authority within 72 hours. The authority is the Office of the Data Protection Commissioner: www.odpc.go.ke.

Nigeria. The Nigeria Data Protection Act, 2023 applies. You may ask for a copy of your data, and we answer without unreasonable delay. If a breach is likely to put your rights at risk, we tell the Commission within 72 hours. You can complain to the Nigeria Data Protection Commission: ndpc.gov.ng.

Ghana. The Data Protection Act, 2012 (Act 843) applies. We answer a request for your data within 40 days. If you ask us to stop processing your data because it is causing or is likely to cause you unwarranted damage or distress, we tell you in writing within 21 days what we will do. We tell the Commission and you of a breach as soon as reasonably practicable. You can complain to the Data Protection Commission: dpc.gov.gh.

Botswana. The Data Protection Act, 2024 applies. We answer your request within one month. Where a request is complex, the Commission may allow us up to two more months, and we tell you within the first month if so. If a breach is likely to put your rights at risk, we tell the Commission within 72 hours. You can complain to the Information and Data Protection Commission.

Rwanda. Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy applies. We answer a request to correct your data, or to stop using it for direct marketing, within 30 days. If you are not satisfied with our answer, you can appeal to the supervisory authority, the National Cyber Security Authority, within 30 days of receiving it. We tell the authority of a breach within 48 hours.

If you live in another country, the data protection law of that country applies, and you can complain to its data protection authority.

12. Changes to this policy

We will update this policy when what we do with personal data changes. If we start to use your personal data for a new purpose, we will tell you before we do and ask for your consent where the law requires it. The date at the top shows when the policy last changed.

13. Contact

Law Lab Africa LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Email: info@lawlab.africa, or course@lawlab.africa for scholarships.